0ba1a35fcd93e0b10de2ad691b584e95261ced5dd031158e26f13f11052cd2de | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0ba1a35fcd93e0b10de2ad691b584e95261ced5dd031158e26f13f11052cd2de
Size

429KB
MD5

930bd92d09d7d36c289886c467ff98e0
SHA1

1833e19de893f69879f42c7d37e134cc02ae5429
SHA256

0ba1a35fcd93e0b10de2ad691b584e95261ced5dd031158e26f13f11052cd2de
SHA512

6669f5c13b979ae270868c5b13857c6396954d6c2256fb0354f6ef2da95905058b36549e7066d56c4562085e0993a801668fb09af2f37cfa2678298b40f0e84e
SSDEEP

6144:CoG9xHeUHBohtwN8U8SyUa1i+wOP8IMHmPq+8RGsHwgAQFVCYsDeeSCK+lfAVU:q9x+WQmN/H+wMLMGPzLwW0I3zlIy

Score

N/A

Malware Config

Signatures

Files

0ba1a35fcd93e0b10de2ad691b584e95261ced5dd031158e26f13f11052cd2de
.exe windows x86

ca3f9371aa4f69feceedf89e6bd81790

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

ZwAccessCheckByTypeAndAuditAlarm

user32

LoadBitmapA
GetMessagePos

kernel32

GetCommandLineW
GetConsoleWindow

Sections

.text
Size: 427KB - Virtual size: 428KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 338B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE